Description
njwt up to v0.4.0 was discovered to contain a prototype pollution in the Parser.prototype.parse method.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | njwt | < 2.0.1 | 2.0.1 | GHSA-3hvj-2783-34x2 |
Medium · 5.9
CVE-2024-34273
EUVD-2024-1390GHSA-3hvj-2783-34x2
njwt Prototype Pollution vulnerability
Published May 16, 2024 · Updated Feb 13, 2025 · Assigned by mitre